After reviewing over 10 billion botnets records, a lot of unusual records come to mind.Unlike much of stolen data, botnets do a great job in record keeping who, when, where, what and even sometimes how and why questions get answered.Let’s try connecting credentials stolen by a botnet and an unattributed breach and we may be able to tell who was breached, and even when.This presentation which is based on research and practical examples will lift a veil off the botnets and will make mining data significantly more actionable.